Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
File: FTyehIfJi0U_l08gMX7OPXD01d0.mft (raw, json)
Hash identifier: U/Uv0+f4mBatnW/sIDnSOI3SlTwRrRmLNwf8IKVxPtQ=
Subject key identifier: 8B:AF:52:2E:BB:58:C9:29:F5:15:0C:83:B7:E2:5D:D3:2B:07:7D:C0
Authority key identifier: 15:3C:9E:84:87:C9:8B:45:3F:97:4F:20:31:7E:CE:3D:70:F4:D5:DD
Certificate issuer: /CN=153c9e8487c98b453f974f20317ece3d70f4d5dd
Certificate serial: 019D27A8D2AD6752DBE309EE09A7CF211C07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
Manifest number: 0DC2
Signing time: Thu 26 Mar 2026 01:01:08 +0000
Manifest this update: Thu 26 Mar 2026 01:01:08 +0000
Manifest next update: Fri 27 Mar 2026 01:01:08 +0000
Files and hashes: 1: 9jINeFumL336-QR3Wj0mntR5_cM.roa (hash: wVCs9VOH0OKrniCbWjEGE6eJoair0ggue+MyLd2THDQ=)
2: FTyehIfJi0U_l08gMX7OPXD01d0.crl (hash: CakYuZNglOfvUH9OHWrhilNPK65MsO1MYpr/pm43JwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:d2:ad:67:52:db:e3:09:ee:09:a7:cf:21:1c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153c9e8487c98b453f974f20317ece3d70f4d5dd
Validity
Not Before: Mar 26 01:01:08 2026 GMT
Not After : Mar 27 01:01:08 2026 GMT
Subject: CN=8baf522ebb58c929f5150c83b7e25dd32b077dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e2:3d:15:a4:4b:da:e5:3a:d4:40:b3:a7:b6:
14:74:77:9d:9b:49:59:b5:28:c8:42:56:72:99:4e:
17:c9:9f:81:bc:6f:35:58:b8:05:4c:50:8f:d1:e5:
8d:f9:89:c2:86:1f:58:87:2e:11:fa:82:50:c4:a7:
90:ef:6b:fe:32:c9:2b:09:3a:ab:8f:db:1e:ae:bf:
a7:0c:03:98:64:14:c7:b0:0c:f4:a9:e6:85:eb:c8:
3c:2b:21:4a:42:16:ab:59:18:6e:f1:37:d3:68:76:
82:ed:57:bc:fd:8e:b9:8b:98:0a:64:cc:5e:d0:88:
3b:28:69:d9:d0:a6:8f:27:3c:5b:07:f9:70:9f:0c:
e8:e3:93:68:d6:6a:cd:3b:3b:2f:80:23:4d:c2:d4:
29:ef:4f:42:12:0d:b8:1d:70:f4:32:7e:b6:9e:95:
2a:46:4f:c3:8a:f3:f6:5a:77:be:b4:4c:84:14:66:
6a:2c:12:98:c0:c5:fc:dc:8b:d3:f4:0d:f1:5d:a8:
09:d4:82:1b:f9:ca:ef:39:99:68:a5:0a:78:34:51:
0e:5a:43:11:93:91:71:90:bb:32:d3:6a:44:bc:10:
6d:12:2d:23:5f:ae:81:f0:8c:aa:be:b3:d9:12:a7:
d7:f8:f1:f7:91:32:50:4e:8a:d1:02:d3:8c:a4:7b:
9f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AF:52:2E:BB:58:C9:29:F5:15:0C:83:B7:E2:5D:D3:2B:07:7D:C0
X509v3 Authority Key Identifier:
keyid:15:3C:9E:84:87:C9:8B:45:3F:97:4F:20:31:7E:CE:3D:70:F4:D5:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:90:11:80:1a:68:3c:63:42:f3:67:98:49:a4:b9:ec:71:12:
77:4a:8e:43:ce:55:50:fd:0d:67:56:6f:54:a3:77:1b:1d:cf:
c1:9f:f6:6e:29:55:1a:7c:2e:79:78:66:29:54:50:c3:41:c9:
3e:70:6f:fd:83:47:d0:c8:72:0a:b1:3b:35:ad:fd:98:c2:4d:
7f:82:04:97:cf:91:77:c3:7f:96:33:7a:2e:a0:d9:4d:f4:32:
83:de:4c:06:ad:70:5c:dc:fc:b5:3e:ce:31:2c:fe:1a:39:41:
47:ce:a5:b2:0a:00:25:d4:84:6d:8d:7d:4d:8b:e9:be:56:b2:
a2:e7:c3:fa:81:10:5e:a8:aa:87:4b:85:28:49:1b:15:b5:06:
a2:f5:2f:8c:19:8b:7e:58:b9:71:6c:87:65:e4:84:f4:e4:68:
f1:0e:23:98:54:da:00:8c:f7:b3:fd:c9:ba:8c:04:0d:9b:cf:
3f:f2:77:ea:a7:21:57:d0:f3:48:18:ea:d1:97:09:07:db:dd:
97:83:82:f1:a8:3f:3f:88:16:aa:80:68:27:46:a6:6e:00:8d:
5a:d7:81:b2:05:db:7b:59:5d:1f:06:7a:c8:dc:fd:0c:fa:37:
da:89:f7:7b:e9:80:58:5f:87:45:1f:5e:1e:8d:6e:a0:6d:56:
4e:5b:d0:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqNKtZ1Lb4wnuCafPIRwHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1M2M5ZTg0ODdjOThiNDUzZjk3NGYyMDMxN2VjZTNkNzBm
NGQ1ZGQwHhcNMjYwMzI2MDEwMTA4WhcNMjYwMzI3MDEwMTA4WjAzMTEwLwYDVQQD
Eyg4YmFmNTIyZWJiNThjOTI5ZjUxNTBjODNiN2UyNWRkMzJiMDc3ZGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+I9FaRL2uU61ECzp7YUdHedm0lZ
tSjIQlZymU4XyZ+BvG81WLgFTFCP0eWN+YnChh9Yhy4R+oJQxKeQ72v+MskrCTqr
j9serr+nDAOYZBTHsAz0qeaF68g8KyFKQharWRhu8TfTaHaC7Ve8/Y65i5gKZMxe
0Ig7KGnZ0KaPJzxbB/lwnwzo45No1mrNOzsvgCNNwtQp709CEg24HXD0Mn62npUq
Rk/DivP2Wne+tEyEFGZqLBKYwMX83IvT9A3xXagJ1IIb+crvOZlopQp4NFEOWkMR
k5FxkLsy02pEvBBtEi0jX66B8IyqvrPZEqfX+PH3kTJQTorRAtOMpHufyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIuvUi67WMkp9RUMg7fiXdMrB33AMB8GA1UdIwQY
MBaAFBU8noSHyYtFP5dPIDF+zj1w9NXdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlR5ZWhJZkppMFVfbDA4Z01YN09QWEQwMWQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wZmY2MzMtZWI0YS00ZTE4LWFkNTYt
MGQwMThkYmNjN2NiLzEvRlR5ZWhJZkppMFVfbDA4Z01YN09QWEQwMWQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8wZmY2MzMtZWI0YS00ZTE4LWFkNTYtMGQwMThkYmNjN2Ni
LzEvRlR5ZWhJZkppMFVfbDA4Z01YN09QWEQwMWQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpARgBpo
PGNC82eYSaS57HESd0qOQ85VUP0NZ1ZvVKN3Gx3PwZ/2bilVGnwueXhmKVRQw0HJ
PnBv/YNH0MhyCrE7Na39mMJNf4IEl8+Rd8N/ljN6LqDZTfQyg95MBq1wXNz8tT7O
MSz+GjlBR86lsgoAJdSEbY19TYvpvlayoufD+oEQXqiqh0uFKEkbFbUGovUvjBmL
fli5cWyHZeSE9ORo8Q4jmFTaAIz3s/3JuowEDZvPP/J36qchV9DzSBjq0ZcJB9vd
l4OC8ag/P4gWqoBoJ0ambgCNWteBsgXbe1ldHwZ6yNz9DPo32on3e+mAWF+HRR9e
Ho1uoG1WTlvQDA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:47:01 2026 by rpki-client